WHAT IS CLAIMED IS : 

1. A system for managing information comprising: 

a communication request monitor unit which monitors 
a communication request ; 

a management unit which selects a countermeasure based 
upon information notified from the communication request 
monitor unit ; and 

a performing unit which performs the countermeasure 
in response to an instruction from the management unit, 
wherein said management unit includes , 

a database which manages a notification content 
from the communication request monitor unit and a 
countermeasure that the performing unit performs while 
letting the notification content and the countermeasure 
correspond to each other; and 

a selection unit which selects a countermeasure 
based upon the database. 

2. The system according to claim 1, further comprising 
an information collection unit which collects information 
related to the kind, content, order, and time interval of 
two or more communications in a proceeding process of an 
attack event or a leakage event and a reflection unit which 
reflects the information collected and regulated by the 
information collection unit upon the database. 



3 . The system according to claim 1 f wherein the selection 
unit selects a countermeasure from various angles based upon 
the database and mounting information , operation management 
information, and/or security information. 

4. The system according to claim 3, wherein based upon 
which of the mounting information, the operation management 
information and/or the security information a 
countermeasure is selected can be setting-changed according 
to the selection of a user. 

5. The system according to claim 1, wherein the 
communication request monitor unit, management unit, and 
the performing unit are provided in plurality. 

6. The system according to claim 5, wherein the 
communication request monitor units, management units, and 
the performing units cooperate with each other between the 
same type or different types thereof to exchange information . 

7 . The system according to claim 1 , wherein the 
information notified by the communication request monitor 
unit and/or a countermeasure selected by the management unit 
are weighted . 



8. The system according to claim 7, wherein a weight 
coefficient for the weighting can be arbitrarily set by a 
user . 

9. The system according to claim 7, wherein a weight 
coefficient for the weighting is set based upon the mounting 
information, operation management information and/or 
security information . 

10. The system according to claim 1, wherein the database 
holds information notified by the communication request 
monitor unit in time series, and the selection unit selects 
a countermeasure based upon the time series information 
stored in the database. 

11. The system according to claim 5, further comprising 
a site map formation unit which forms a site map representing 
a spatial arrangement of a website based upon the information 
notified by the plural communication request monitor unit. 

12. The system according to claim 7 , further comprising 
a site map formation unit which forms a site map representing 
a spatial arrangement of a website based upon the information 
notified by the plural communication request monitor unit. 



13. The system according to claim 10, further comprising 
a site map formation unit which forms a site map representing 
a spatial arrangement of a website based upon the information 
notified by the plural communication request monitor unit. 

14. The system according to claim 5, further comprising 
a monitor condition notification unit which notifies the 
communication request monitor unit of the kind and/or time 
of a communication to be a monitor object based upon the 
a site map formed by the site map formation unit. 

15. The system according to claim 7 , further comprising 
a monitor condition notification unit which notifies the 
communication request monitor unit of the kind and/or time 
of a communication to be a monitor object based upon the 
a site map formed by the site map formation unit. 

16. The system according to claim 10, further comprising 
a monitor condition notification unit which notifies the 
communication request monitor unit of the kind and/or time 
of a communication to be a monitor object based upon the 
a site map formed by the site map formation unit. 



17 . The system according to claim 1 , wherein the management 
unit gives a request to a website existing in a network and 
automatically updates the database based upon information 
replied in response to the request. 

18 . The system according to claim 17 , wherein the request 
is performed in response to a request of a user. 

1 9 . The system according to claim 1 f wherein the management 
unit automatically updates the database based upon 
information automatically transmitted from a website 
existing in a network. 

20. The system according to claim 19, wherein the 
information automatically transmitted from a website 
existing in a network are taken in the database in response 
to a request of a user. 

21. The system according to claim 1, further comprising 
a vulnerability present unit which provides vulnerability 
of the system; and an information collection unit which 
collects information related to an attack the vulnerability 
presented by the vulnerability present unit. 



22. The system according to claim 1, further comprising 
an investigation unit investigating an outgoing source of 
a communication content and a determination unit which 
determines whether or not a website is made a stepping-stone 
by an ill-intentioned person based upon an investigation 
result by the investigation unit. 

23. The system according to claim 1, further comprising 
a decoy unit leading a communication to a location different 
from an attack object to avoid an attack. 

24. A method of managing information comprising: 

a communication request monitor step monitoring a 
communication request by a communication request monitor 
unit ; 

a selection step in which a management unit selects 
a countermeasure based upon a database which manages a 
notification content notified by the communication request 
monitor step and a countermeasure performed while making 
them correspond to each other; and 

a performing step in which a performing unit performs 
a countermeasure in response to an instruction from the 
management step. 



25. The method according to claim 2 4 , further comprising 
an information collection step collecting information 
related to the kind, content, order, and time interval of 
two or more communications in a proceeding process of an 
attack event or a leakage event and a reflection step 
reflecting the information collected and regulated by the 
information collection step upon the database. 

26 . The method according to claim 24 , wherein the selection 
step selects a countermeasure from various angles based upon 
the database and mounting information , operation management 
information, and/or security information. 

27. The method according to claim 26, wherein based upon 
which of the mounting information, the operation management 
information and/or the security information a 
countermeasure is selected can be setting-changed according 
to the selection of a user. 

28. The .method according to claim 24, wherein the 
communication request monitor unit, management unit, and 
the performing unit are provided in plurality. 



29. The method according to claim 28, wherein the 
respective plurality of communication request monitor units , 
management units, and performing units cooperate with each 
other between the same type or different types thereof to 
exchange information . 

30. The method according to claim 24, wherein the 
information notified by the communication request monitor 
unit and/or a countermeasure selected by the management unit 
are weighted. 



31. The method according to 
coefficient for the weighting 
user . 



claim 30, wherein a weight 
can be arbitrarily set by a 



32. The method according to claim 30, wherein a weight 
coefficient for the weighting is set based upon the mounting 
information, operation management information and/or 
security information . 

33 . The method according to claim 24 , wherein the database 
holds information notified by the communication request 
monitor unit in time series, and the selection step selects 
a countermeasure based upon the time series information 
stored in the database. 
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34. The method according to claim 28 f further comprising 
a site map formation step forming a site map representing 
a spatial arrangement of a website based upon the information 
notified by the communication request monitor units. 

35. The method according to claim 30 , further comprising 
a site map formation step forming a site map representing 
a spatial arrangement of a website based upon the information 
notified by the communication request monitor units. 

36. The method according to claim 33 , further comprising 
a site map formation step forming a site map representing 
a spatial arrangement of a website based upon the information 
notified by the communication request monitor units. 

37. The method according to claim 28, further comprising 
a monitor condition notification step notifying the 
communication request monitor units of the kind and/or time 
of a communication to be a monitor object based upon the 
a site map formed by the site map formation step. 

38. The method according to claim 30 , further comprising 
a monitor condition notification step notifying the 
communication request monitor units of the kind and/or time 
of a communication to be a monitor object based upon the 



a site map formed by the site map formation step. 

39. The method according to claim 33 , further comprising 
a monitor condition notification step notifying the 
communication request monitor units of the kind and/or time 
of a communication to be a monitor object based upon the 
a site map formed by the site map formation step. 

40. The method according to claim 24 , wherein the 
management unit gives a request to a website existing in 
a network and automatically updates the database based upon 
information replied in response to the request. 

41. The method according to claim 40, wherein the request 
is performed in response to a request of a user. 

42. The method according to claim 24, wherein the 
management unit automatically updates the database based 
upon information automatically transmitted from a website 
existing in a network. 

43 . The method according to claim 42 , wherein the database 
is automatically update based on the information transmitted 
from a website existing in a network in response to a request 
of a user. 
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44. The method according to claim 24, further comprising 
a vulnerability present step of providing vulnerability of 
the system; and an information collection step collecting 
information related to an attack against the vulnerability 
provided in the vulnerability present step. 

45* The method according to claim 24, further comprising 
an investigation step investigating an outgoing source of 
a communication content and a determination step determining 
whether or not a website is made a stepping-stone by an 
ill-intentioned person based upon an investigation result 
by the investigation step. 

46. The method according to claim 24, further comprising 
a decoy unit leading a communication to a location different 
from an attack object to avoid an attack. 

47. A computer readable medium for storing instructions, 
which when executed on a computer, causes the computer to 
perform the steps of: 

monitoring communication requests; 

outputting a notification in case of a abnormality; 

selecting a countermeasure from a database which 
manages content of notification and corresponding 
countermeasure ; and 
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taking a countermeasure against the abnormality based 
on the selected countermeasure . 
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